Skip to content
Breaches.

Wishbone

Disclosed May 28, 20206 years ago9,705,172 accountsUnverified

In January 2020, the mobile app to "compare anything" Wishbone suffered another data breach which followed their breach from 2016. An extensive amount of personal information including almost 10M unique email addresses alongside names, phone numbers geographic locations and other personal attributes were leaked online and extensively redistributed. Passwords stored as unsalted MD5 hashes were also included in the breach.

What is known

People affected9,705,172 (accounts in the leaked data, per Have I Been Pwned)
DisclosedMay 28, 2020
HappenedJan 27, 2020
AttackNot stated
Data exposedCredentials and tokens, Dates of birth, Emails, Location, IP addresses, Names, Passwords, Phone numbers
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Wishbone (2020)haveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataMay 28, 20209,705,172

Other breaches at Wishbone

BreachAffected
Disclosed Mar 15, 2017Mar 15, 20179 years agoUnverified2.2Macct
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Wishbone

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.